Available now. macOS, Windows and Linux. BranchShell

The SSH client that knows your repositories.

Your servers, keys, port forwards and databases in an encrypted vault on your computer. Split terminals, SFTP with S3 and R2, a SQL client, mosh. And a link to BranchBay that puts every host one shortcut away from the repository it belongs to.

14-day trial on first launch, then $20 once for 2 computers. No account, no cloud, no telemetry, like BranchBay.

  • Native

    Written in Rust and drawn on the GPU, on the same engine as BranchBay. The terminal, the widgets and the themes are the ones you already use.

  • Local-first

    Hosts, keys, identities, snippets, forwarding rules and database connections live in an encrypted vault on your computer. No account, no cloud, nothing leaves the machine.

  • Made for BranchBay

    Link the two once and the tray lists your whole vault: connect to a host, start a forward or open a database from any app, or drop into a shell in the repository you are looking at.

  • Out of the way

    BranchBay starts it in the background when it only needs a forward. No window, no Dock tile, until you open a session yourself.

Download

Pick your platform and connect to a host.

The 14-day trial starts on first launch. No account needed.

Version 1.0.2 Release notes
HomebrewNeeds macOS 13 Ventura or newer.
$ brew tap branchshell/tap https://github.com/BranchBay/BranchShellTap.git$ brew trust branchshell/tap$ brew install --cask branchshell
Features

An SSH client with a vault, not a settings file.

Everything Termius and the others keep in the cloud, BranchShell keeps in an encrypted vault on your computer, with the terminal BranchBay already runs.

01 · HOSTS

Every server, with everything it needs.

Hosts in groups with a colour and tags, each knowing its user, port, key or password, the operating system behind it, a terminal theme of its own, the environment to set and the snippet to run on connect. Hop through jump hosts in a chain, or go out through an HTTP or SOCKS proxy. Import your SSH config, or fetch the servers in your AWS, DigitalOcean, Azure and Hetzner Cloud accounts.

  • Groups and tags
  • ProxyJump chains
  • HTTP and SOCKS proxies
  • Run on connect
  • Per-host themes
  • Import ~/.ssh/config
  • Cloud import
The BranchShell Hosts view with a Microserver host selected and its details panel open on the right
02 · KEYS & IDENTITIES

A keychain that stays on your computer.

Generate Ed25519, ECDSA or RSA keys in the app, import the ones you have, or sign with a FIDO2 security key or Touch ID. Certificates and passwords become identities you attach to hosts instead of typing them. Agent forwarding per host, known hosts checked and kept, and the vault locked behind a password you can leave in the system credential store.

  • Ed25519, ECDSA, RSA
  • FIDO2 and Touch ID
  • Certificates
  • Identities
  • Agent forwarding
  • Credential store unlock
The BranchShell Keychain view listing keys by vault group with their type and how many hosts use each
03 · PORT FORWARDING

Forwards you start with a key, not a command.

Local, remote and dynamic rules saved against a host, started and stopped with a switch, from the palette, the Activity bar or the BranchBay tray. Rules can start with the host, and the editor draws the path a connection takes from this computer through the intermediate host to its destination.

  • Local, remote, dynamic
  • Autostart with the host
  • Activity bar
  • Start from BranchBay
The BranchShell Port Forwarding view with a running local rule being edited in the side panel
04 · TERMINAL

The terminal BranchBay uses, with mosh when the link is bad.

Fast, GPU-drawn, with the themes you know from BranchBay plus a set of its own, each host free to pick one. Tide and Rosé Pine Dawn for daylight, Ember for production boxes. Addresses in the output are links. Mosh hosts reconnect when you move networks, sessions can be logged, and the side panel keeps snippets, history and the theme picker a click away.

  • Mosh
  • Serial ports
  • Light and dark themes
  • Session logs
  • Broadcast input
A BranchShell session in the Night Owl theme with the theme picker open in the side panel
05 · SNIPPETS & AUTOCOMPLETE

Your snippets and history, as you type.

Start typing and a popup offers matching snippets and commands from your history. Return inserts one, the arrow keys search them. Laya, a small classifier that runs on your computer, files snippets into categories such as Containers, Git and Services, and a snippet can be tied to the hosts it belongs to. Cmd+F searches the terminal output.

  • Autocomplete
  • Laya categories
  • Snippets per host
  • Terminal search
The BranchShell autocomplete popup suggesting snippets and history after typing sudo, with the snippets panel open
06 · COMMAND PALETTE

Cmd+P lists connections, not commands.

Active port forwards first, then recent hosts and the forwards you could bring online. Type to search every host, or type user@host to connect once without saving anything. A global shortcut opens it over any application.

  • Hosts and forwards
  • One-off user@host
  • Global shortcut
The BranchShell command palette listing running forwards, recent hosts and forwards to start
07 · WORKSPACES

Up to four terminals side by side.

Drag a tab onto a side of a terminal and the two share a workspace, split that way. Nest splits, drag the dividers, maximise one pane, lay the set out as columns, rows or a grid, name and colour the workspace, and tear it off into a window of its own. Workspaces come back on launch.

  • Drag to split
  • Columns, rows, grid
  • Maximise a pane
  • Tear-off windows
  • Restored on launch
A BranchShell workspace named Release check with two hosts side by side, each in its own theme
08 · SFTP

Files, both ways, over the connection you already have.

This computer on the left, a host on the right. Upload, download, rename and delete from the right-click menu, filter either side by name, and reach the files that need root through a sudo-elevated path without a second login.

  • Local and remote panes
  • Right-click actions
  • Elevated with sudo
The BranchShell SFTP tab with the local home folder on the left and a remote home folder on the right
09 · S3 AND R2

Buckets open next to your files.

An Amazon S3 or Cloudflare R2 connection opens in the same SFTP tab as a host does. Browse prefixes, see the storage class of every object, type a path straight into the bar, and download, upload, rename or delete from the right-click menu.

  • Amazon S3
  • Cloudflare R2
  • Storage classes
A Cloudflare R2 bucket open in the BranchShell SFTP tab with the right-click menu on a backup file
10 · DATABASES

Database connections, in the same vault.

Saved connections grouped like your hosts, with the engine, address and credentials kept in the keychain. Any connection can go through an SSH host from the vault: BranchShell opens a forward on the host and connects through it. MySQL, MariaDB, PostgreSQL, SQLite, SQL Server, ClickHouse, Redshift, Turso, Redis, MongoDB, InfluxDB, DynamoDB, CloudWatch, S3 and R2.

  • Through an SSH host
  • Secrets in the keychain
  • Fourteen engines
The BranchShell Databases view listing connections by group with a PostgreSQL connection open for editing
11 · SQL CLIENT

A table grid and a query console, without another app.

Open a table and filter it with a WHERE bar, sort with ORDER BY, page through the rows and export them as CSV. The console runs the statement under the cursor, a selection, or several you pick, each with its own result tab. Modify table edits columns and indexes and shows the SQL it will run, and full-text search looks through every column of every table.

  • WHERE and ORDER BY bars
  • Query console
  • Modify table
  • Full-text search
  • CSV export
A PostgreSQL table open in the BranchShell SQL client with the table tree on the left and columns and indexes on the right
12 · ACTIVITY

What is running, in one strip.

Cmd+J opens the Activity bar under the terminal: every running forward with what it listens on and where it goes, every open session, and the problems that need you, each a click from the thing it concerns.

  • Port forwards
  • Sessions
  • Problems
The BranchShell Activity bar listing two running port forwards under an open terminal
13 · SHORTCUTS

Every shortcut is yours to change.

The same remappable shortcuts as BranchBay, with a Settings page that searches by action or by the keys themselves and spots clashes. Global shortcuts bring BranchShell forward or open the palette over any app, and a set can be exported and imported on your next machine.

  • Remappable
  • Global shortcuts
  • Search by keys
  • Import and export
The BranchShell Shortcuts settings listing application shortcuts with one being remapped

And much more...

  • Known hostsAccepted host keys with their fingerprints, importable from your OpenSSH file.
  • Session logsWhen and from where each session ran, with the ones you saved kept.
  • Several vaultsWork and personal in separate encrypted files, one shortcut between them.
  • Auto-lockThe vault locks after an idle time you choose and asks for its password again.
  • Group filterCmd+G narrows hosts, keys, forwards and snippets to the groups you pick.
  • Serial portsOpen a serial console next to your SSH sessions, in the same tabs.
  • Broadcast inputType once and every pane in the workspace gets it.
  • UI scaleCmd+= and Cmd+- scale the whole window, not only the terminal.
  • Light themeA light window theme to go with the light terminal themes.
  • Menu barClose the window and BranchShell keeps its forwards running from the menu bar.
  • Submarine importBring a Submarine vault across with its hosts, keys, forwards and snippets.
  • Keyboard firstIn every list and search box the arrows walk the rows, Return acts and Esc leaves.
With BranchBay

Your repositories know their servers.

BranchBay is where the code is; BranchShell is where it runs. Linked, the Git client and its tray reach every host, forward and database in your vault, and BranchShell stays out of sight until there is a session to show.

BranchBay's Terminal hosts preferences showing a pairing code while BranchShell asks to allow the link
Pairing: the same code in both apps, allowed from BranchShell.
  1. 1

    Pair once

    Preferences, Integrations, Terminal hosts in BranchBay shows a pairing code; BranchShell shows the same and asks you to allow it. From then on the two talk over a local socket, and either side can unlink. BranchBay sees host names, addresses and forwarding rules. Passwords, keys and what you type stay in BranchShell.

  2. 2

    Shells and forwards in the tray

    Cmd+S switches the BranchBay tray to your whole vault: hosts, port forwards and database connections, filtered by group. Return connects to a host or database or toggles a forward, Tab switches between All, Hosts, Forwards and Databases.

  3. 3

    Only what is running

    The active strip counts open shells, running forwards and connected databases. Cmd+Alt+A narrows the list to them, and Stop all closes every one.

  4. 4

    A shell where you are

    Cmd+T opens the highlighted repository in BranchShell, in a new tab or a new window, in place of the system terminal. BranchShell only comes on screen for a session; a forward runs with nothing to see.

The BranchBay tray in three states: repositories, the Shells and forwards list from the BranchShell vault, and the Active only filter
The tray: repositories, then Cmd+S for shells and forwards, then Cmd+Alt+A for only what is running.
Pricing

One price. Two computers. Yours for good.

No subscription, no seat that expires, no plan to pick. Try it free, then pay once. A separate licence from BranchBay's, at the same price.

A $5 a month subscription costs $60 a year and $300 over five. BranchShell is $20 once for two machines.
Free trial 14days, free Starts the first time you open the app.
  • The complete application, nothing held back
  • No account, no card, no email to start
  • Your groups, profiles and settings carry over when you buy
Download the trial
SSH client licenceBranchShell $20once For 2 computers.
  • Two computers, any mix of macOS, Windows and Linux
  • Every feature, unlimited hosts, keys, forwards and databases
  • Updates delivered inside the app
  • Links to BranchBay at no extra cost
Buy BranchShell for $20 Secure checkout. Your key arrives by email and works straight away.
FAQ

Questions, answered.

Do I need BranchBay to use it?
No. BranchShell is a complete SSH client on its own. BranchBay adds the link: your vault's hosts, forwards and databases in the Git client's tray, and a shell in the repository you are looking at.
Where is my data kept?
In an encrypted vault on your computer, unlocked with a password you can keep in the system credential store. Hosts, keys, identities, snippets, forwarding rules, database connections, known hosts and session logs never leave the machine.
Which databases does it talk to?
MySQL, MariaDB, PostgreSQL, SQLite, SQL Server, ClickHouse, Redshift and Turso with the table grid and the query console; Redis, MongoDB, InfluxDB, DynamoDB and CloudWatch as connections; Amazon S3 and Cloudflare R2 as buckets in the SFTP tab. Any of them can connect through an SSH host from the vault.
Can I bring hosts in from my current client?
Yes. BranchShell reads your OpenSSH config and known hosts, fetches servers from AWS, DigitalOcean, Azure and Hetzner Cloud, and imports a Submarine vault whole.
Which platforms?
macOS, Windows and Linux, from one codebase, on the engine BranchBay already runs on all three. The same vault file, shortcuts and themes on each.
How is it licensed?
A 14-day trial starts on first launch. After it, a licence key bought here or from inside the app unlocks BranchShell for good: $20 once for 2 computers, not a subscription. It is a separate licence from BranchBay's, at the same price.
Is BranchShell a Termius or PuTTY alternative?
Yes. BranchShell is a native SSH client for macOS, Windows and Linux with no account and no subscription. See how it compares with Termius, PuTTY, MobaXterm, SecureCRT, Xshell, Tabby and Prompt .
Compare

Switching from another SSH client?

Which ones bill you every year, which ones run on a Mac and what each does better, side by side. BranchShell is a one-time purchase on every page.

Better together

BranchBay is where the code is.

The Git client BranchShell was built beside. Install both, link them once, and every server is one shortcut from its repository.

Questions about BranchShell: contact@branchbay.dev